topic Do I need a webscript to call external rest server (CORS)? in Alfresco Forum

Do I need a webscript to call external rest server (CORS)?

kaffi — Thu, 04 Apr 2019 11:43:11 GMT

I try to access another Rest service outside from Alfresco via ADF. Everytime I try to execute the call. I get the following error:Access to XMLHttpRequest at 'https:/host/endpoint' from origin 'http://localhost:4200' has been blocked by CORS policy: Response to preflight request doesn't pass access

Re: Do I need a webscript to call external rest server (CORS)?

yogeshpj — Thu, 04 Apr 2019 17:37:24 GMT

If you have made a change on proxy.conf.json then make sure that you are not touching app.config.json file.

OR else enable CORS in alfresco.

Please follow the link for ref https://community.alfresco.com/community/application-development-framework/blog/2017/06/20/adf-cors-solving-strategies#jive_content_id_4_Enabling_CORS_in_Apache

Re: Do I need a webscript to call external rest server (CORS)?

kaffi — Fri, 05 Apr 2019 06:19:15 GMT

Thanks for the answer, but my question was more about the external rest service I want to call which is not running in Alfresco. Is it possible to access this external rest service directly, because I always get the CORS error, or do I need to access it over a webscript?

Re: Do I need a webscript to call external rest server (CORS)?

sp2 — Sun, 07 Apr 2019 04:32:44 GMT

In that external rest service ,you need to enable CORS.

Re: Do I need a webscript to call external rest server (CORS)?

mdtabrezmca — Mon, 08 Apr 2019 05:30:38 GMT

If you are running ADF application on nginx then you can use proxy and then allow CORS on your system.

Re: Do I need a webscript to call external rest server (CORS)?

d_m — Fri, 28 Jun 2019 12:53:04 GMT

This actually isn't an ADF specific question. It doesn't depend on ADF if you need CORS to access an external REST service or not.

Do you need to configure CORS? It depends.
Does the REST service run on the same domain & port or on another domain or port?

In the first case you don't need it, in the second case you do.
Also read this: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS

If it is an external resource (like in not a company resource), why isn't CORS already enabled on the resource? CORS needs to be configured on the external service, not on in ADF/Angular. Adding a CORS header client side won't help you.
You always could proxy that resource (that's basically what proxy.conf.js does), but if CORS isn't present, are you allowed to consume that resource in that way?